CVE-2006-4973

Опубликовано: 25 сент. 2006

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.5, and 4.x before 4.3.5, allows remote attackers to inject arbitrary HTML via the error parameter.

Ссылки

http://secunia.com/advisories/22051
http://www.dotnetnuke.com/About/WhatIsDotNetNuke/SecurityPolicy/SecurityBulletinno3/tabid/990/Default.aspx
Patch
Vendor Advisory
http://www.secureshapes.com/advisories/vuln20-09-2006.htm
Exploit
Patch
Vendor Advisory
URL Repurposed
http://www.securityfocus.com/bid/20117
Exploit
http://www.vupen.com/english/advisories/2006/3734
https://exchange.xforce.ibmcloud.com/vulnerabilities/29048
http://secunia.com/advisories/22051
http://www.dotnetnuke.com/About/WhatIsDotNetNuke/SecurityPolicy/SecurityBulletinno3/tabid/990/Default.aspx
Patch
Vendor Advisory
http://www.secureshapes.com/advisories/vuln20-09-2006.htm
Exploit
Patch
Vendor Advisory
URL Repurposed
http://www.securityfocus.com/bid/20117
Exploit
http://www.vupen.com/english/advisories/2006/3734
https://exchange.xforce.ibmcloud.com/vulnerabilities/29048

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.6:*:*:*:*:*:*:*

cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.7:*:*:*:*:*:*:*

cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.8:*:*:*:*:*:*:*

cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.9:*:*:*:*:*:*:*

cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10d:*:*:*:*:*:*:*

cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10e:*:*:*:*:*:*:*

cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:dotnetnuke:dotnetnuke:2.1.2:*:*:*:*:*:*:*

cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.7:*:*:*:*:*:*:*

cpe:2.3:a:dotnetnuke:dotnetnuke:3.0.8:*:*:*:*:*:*:*

cpe:2.3:a:dotnetnuke:dotnetnuke:3.1.0:*:*:*:*:*:*:*

cpe:2.3:a:dotnetnuke:dotnetnuke:4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01082

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-wf6r-xprx-6h97

github

почти 4 года назад